Over the last few weeks we have detected a significant increase in both scanning for 1900/UDP and a huge increase of 1900/UDP being used for amplified reflective DDOS attacks.
\more here.................https://isc.sans.edu/diary/1900UDP+%28SSDP%29+Scanning+and+DDOS/18599
\more here.................https://isc.sans.edu/diary/1900UDP+%28SSDP%29+Scanning+and+DDOS/18599